CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2012-0556
https://notcve.org/view.php?id=CVE-2012-0556
03 May 2012 — Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK, a different vulnerability than CVE-2012-0554, CVE-2012-0555, and CVE-2012-0557. Vulnerabilidad no especificada en el componente Oracle Outside In Technology en Oracle Fusion Middleware 8.3.5 y 8.3.7 permite a atacantes remotos afectar la confidencialidad, la integridad y la d... • http://www-01.ibm.com/support/docview.wss?uid=swg21660640 •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2012-0557
https://notcve.org/view.php?id=CVE-2012-0557
03 May 2012 — Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK, a different vulnerability than CVE-2012-0554, CVE-2012-0555, and CVE-2012-0556. Vulnerabilidad no especificada en el componente Oracle Outside In Technology en Oracle Fusion Middleware 8.3.5 y 8.3.7 permite a atacantes remotos afectar la confidencialidad, la integridad y la d... • http://www-01.ibm.com/support/docview.wss?uid=swg21660640 •
CVSS: 8.2EPSS: 0%CPEs: 5EXPL: 0CVE-2012-0083
https://notcve.org/view.php?id=CVE-2012-0083
18 Jan 2012 — Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search. Vulnerabilidad no especificada en el componente Oracle WebCenter Content component en Oracle Fusion Middleware v7.5.2, v10.1.3.5.1, v11.1.1.3, v11.1.1.4 y v11.1.1.5 permite a atacantes remotos afectar a la confidencialidad y a la integridad de la información a ... • http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2012-0084
https://notcve.org/view.php?id=CVE-2012-0084
18 Jan 2012 — Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server. Vulnerabilidad no especificada en el componente Oracle WebCenter Content en Oracle Fusion Middleware v7.5.2, v10.1.3.5.1, v11.1.1.3, v11.1.1.4 y v11.1.1.5 permite a usuarios remotos autenticados afectar a la integridad de la información a través de vectores desco... • http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2012-0085
https://notcve.org/view.php?id=CVE-2012-0085
18 Jan 2012 — Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server. Vulnerabilidad no especificada en el Componente Oracle WebCenter Content en Oracle Fusion Middleware v7.5.2 y v10.1.3.5.1 permite a atacantes remotos afectar a la integridad de la información a través de vectores desconocidos relacionados con el servidor de contenidos. • http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html •
CVSS: 9.4EPSS: 0%CPEs: 2EXPL: 0CVE-2012-0110
https://notcve.org/view.php?id=CVE-2012-0110
18 Jan 2012 — Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK. Vulnerabilidad no especificada en el componente Oracle Outside In Technology en Oracle Fusion Middleware v8.3.5 y v8.3.7 permite afectar a la confidencialidad, integridad y disponibilidad de los datos a atacantes dependientes del contexto. Esta vulnerabilidad esta ... • http://www-01.ibm.com/support/docview.wss?uid=swg21660640 •
CVSS: 5.3EPSS: 0%CPEs: 16EXPL: 0CVE-2010-4453
https://notcve.org/view.php?id=CVE-2010-4453
19 Jan 2011 — Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container. Vulnerabilidad no especificada en el componente Oracle WebLogic Server para Oracle Fusion Middleware v7.0.7, v8.1.6, v9.0, v9.1, v9.2.4, v10.0.2, v10.3.2, y v10.3.3 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos relacionados Se... • http://osvdb.org/70584 •
CVSS: 4.3EPSS: 16%CPEs: 3EXPL: 1CVE-2010-2370 – Oracle Business Process Management 10.3.2 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2010-2370
13 Jul 2010 — Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM. Vulnerabilidad no especificada en el componente Oracle Business Process Management de Oracle Fusion Middleware v5.7 MP3, v6.0 MP5, y v10.3 MP2, permite a atacantes remotos afectar la integridad, relacionado con BPM. • https://www.exploit-db.com/exploits/34310 •
CVSS: 7.5EPSS: 2%CPEs: 14EXPL: 8CVE-2010-1622 – Spring Framework - Arbitrary code Execution
https://notcve.org/view.php?id=CVE-2010-1622
21 Jun 2010 — SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file. SpringSource Spring Framework v2.5.x anteriores a v2.5.6.SEC02, v2.5.7 anteriores a v2.5.7.SR01, y v3.0.x anteriores a v3.0.3 permite a atacantes remotos ejecutar código arbitrario a través de una petición HTTP que contenga class.classLoader.URLs[0]=jar:... • https://www.exploit-db.com/exploits/13918 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') •